Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: OZIuleyZ3LmMQITPjSe0xLBA2nwisSUDJXFB4ZSXb5M=
Subject key identifier: 49:AE:33:E2:BA:93:A4:2B:1F:0F:86:07:6F:9B:A1:A5:C3:46:2F:D5
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 01974BC4442190D27D890E87A19FB6607447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 12A1
Signing time: Sat 07 Jun 2025 19:00:42 +0000
Manifest this update: Sat 07 Jun 2025 19:00:42 +0000
Manifest next update: Sun 08 Jun 2025 19:00:42 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: W/r0RKFVKbInLB8vRQWS16acPpYjS9HaQxRnzxS2U5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:44:21:90:d2:7d:89:0e:87:a1:9f:b6:60:74:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Jun 7 19:00:42 2025 GMT
Not After : Jun 8 19:00:42 2025 GMT
Subject: CN=49ae33e2ba93a42b1f0f86076f9ba1a5c3462fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:f9:94:57:9d:9b:1f:02:38:54:08:16:34:
e9:05:5f:b4:28:32:e2:6c:fe:3e:3a:17:07:91:13:
a0:e0:d5:de:9f:13:cb:11:86:8f:04:87:dc:ec:29:
c5:47:ac:b5:11:72:00:44:06:34:ab:dc:79:a5:a8:
0e:63:4d:63:ec:52:b9:ab:85:39:5c:75:e4:ed:a6:
86:55:7e:38:06:01:e0:4a:79:b1:4e:eb:e5:7a:87:
fc:37:7d:5b:7a:29:c6:0b:d8:a3:c0:05:db:27:62:
0d:4c:78:90:26:57:26:3c:49:76:23:26:c8:d0:48:
45:81:95:ef:69:df:1e:9d:db:10:53:8b:82:ee:7e:
94:25:67:02:9c:88:55:90:30:0b:58:e1:e6:f4:96:
c3:0b:f9:a8:c6:4d:83:9e:d0:8d:e9:a6:19:7d:55:
12:5c:0c:c2:f6:05:a6:e6:72:db:05:cf:24:29:0f:
bd:92:1a:99:30:3e:11:6e:a6:d1:30:9d:5e:ed:73:
23:c7:7a:66:50:30:9e:2e:86:a7:0e:ea:02:d6:5f:
a2:24:a0:5b:46:0a:25:a8:ce:5d:05:1f:c5:4f:90:
1f:81:65:0e:99:50:c7:00:ac:b7:3f:fb:28:6c:b6:
b5:38:e9:cf:dd:2a:0e:3d:c6:b6:56:05:33:fb:0a:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AE:33:E2:BA:93:A4:2B:1F:0F:86:07:6F:9B:A1:A5:C3:46:2F:D5
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c8:c0:56:72:a0:9b:3b:b7:da:e7:d6:09:fd:08:8f:9d:93:
2a:9f:12:cc:cb:ae:f8:a0:07:9c:c4:60:56:35:f6:ba:e9:ef:
de:79:65:56:50:b7:ee:4e:be:06:16:8e:1c:ff:9a:32:ab:88:
5a:88:1e:f2:3b:ec:0f:04:0b:2e:fb:95:a5:b7:b5:ad:ab:1b:
50:ef:52:4b:f5:32:85:41:f8:04:82:33:70:f7:cd:69:8c:da:
32:c0:04:f6:d6:92:30:25:45:c5:65:8b:d5:9c:50:4d:5b:45:
10:91:18:35:45:0e:84:02:de:46:ab:cc:24:eb:f4:de:0c:dd:
37:e8:a0:74:7f:99:2a:31:d1:32:87:63:4e:0f:1d:0b:aa:eb:
0e:33:41:10:69:6d:33:7e:db:71:23:0d:f6:a0:7a:05:74:e4:
4a:30:bd:20:18:ea:81:2a:32:56:36:cb:21:81:7e:ed:d2:44:
8f:46:db:4b:9e:ca:8b:10:d5:47:5e:76:20:04:9b:37:37:b0:
3b:18:8e:f9:67:c2:4e:a0:55:46:fc:de:72:8f:31:ff:49:f8:
34:c7:ea:6c:58:6d:e0:0b:05:69:90:01:bc:db:d7:da:84:20:
57:f9:3f:9e:8e:c0:55:2e:4a:3f:89:bb:8e:cb:b7:82:ea:f2:
8c:9b:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:53 2025 by rpki-client